Google Android Zygote Process Remote Denial of Service Vulnerability

Bugtraq ID:	63000
Class:	Access Validation Error
CVE:	CVE-2011-3918
Remote:	Yes
Local:	No
Published:	Jan 27 2012 12:00AM
Updated:	Jan 27 2012 12:00AM
Credit:	AI-Lab
Vulnerable:	Google Android 4.0.3 Google Android 4.0.1 Google Android 2.3.6 Google Android 2.3.5 Google Android 2.2.3 Google Android 4.0 Google Android 3.2 Google Android 3.1 Google Android 2.3.4 Google Android 2.3.3 Google Android 2.3.2 Google Android 2.3.1 Google Android 2.3 Google Android 2.2.2 Google Android 2.2.1 Google Android 2.2 Google Android 2.1 Google Android 1.6 Google Android 1.5
Not Vulnerable:

Google Android Zygote Process Remote Denial of Service Vulnerability

Google Android is prone to a remote denial-of-service vulnerability.

Successfully exploiting this issue will allow an attacker to cause a denial-of-service condition.

Google Android 4.0.3 and prior are vulnerable.

Google Android Zygote Process Remote Denial of Service Vulnerability

The following exploit application is available:

• /data/vulnerabilities/exploits/63000.txt

Google Android Zygote Process Remote Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Google Android Zygote Process Remote Denial of Service Vulnerability

References:

• Android Homepage (Google)
  
• CVE-2011-3918: Restrict zygote to system user. (Google)
  
• Would You Mind Forking This Process? A Denial of Service attack on Android (AI-Lab)